Application Serial No. 10/584,671 - Filed June 26, 2009 
IN THE CLAIMS 

Please cancel claims 9-17 without prejudice as to the subject matter therein. 
Please amend claims 1, 3, 6, and 7 as follows. 
Please add claims 20-22. 

1 . (Currently Amended) A method for identifying the content of a file in a network 
environment, said network environment comprising at least one local computing device 
linked to a remaining part of the network environment including a central infrastructure 
and, the method comprising 

receiving a new file on said local computing device; 

in response to receiving the new file, the local computing device: 

calculating a reference value for the new file using a one-way-function; 
and 

transmitting said calculated reference value to said central infrastructure; 
in response to receiving the reference value, the central infrastructure: 
comparing said calculated reference value with reference values 
previously stored within the remaining part of the network 
environment; 
after responsive to said comparing: 

if a match between the calculated reference value and a previously stored 
reference value is found: 

deciding that the content of the new file is already identified; if-a 
match between said calculated reference value and a 
previously stored reference value is found and 

retrieving corresponding content attributes; er 
if a match between the calculated reference value and any of the 

previously stored reference values is not found: 

deciding that the content of the new file is not yet identified; i&m 
match between said calculated reference value and any of 
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the previously stored reference values is found, followed by 

enabling the new file on the local computing device to said be 
remotely accessed by the central infrastructure; and said 

the central infrastructure identifying the content of said the n ew 
file by remotely identifying the content over the network 
environment without the new file being conveyed to the 
central infrastructure , thereby determining content 
attributes corresponding with the content of the new file 
and storing a copy of said content attributes at the central 
infrastructure ; 

after deciding, triggering an action on said local computing device in 

accordance with said content attributes; 
wherein said triggering an action on said local computing device in 
accordance with said content attributes comprises: 
identifying a different version of the new file on the remaining part 
of the network environment, the new file representing a 
corrupted version of a given file and the different version 
representing an uncorrupted version of the given file; and 
replacing the new file on the local computing device with the 

identified different version of the new file- 
replacement of the new file on the local computing device with a 
different version of said new file restored from the 
remaining part of the network environment. 

2. (Original) A method according to claim 1, wherein said triggering an action on said 
local computing device in accordance with said content attributes is performed after 
transmitting the content attributes corresponding to the new file to the local computing 
device. 

3. (Currently Amended) A method according to claim 1 wherein said identifying the 
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content of said new file comprises 




^scanning for viruses^ 



dng for adult content, scanning for Self Promotional Advertising Messages and 



4. (Previously Presented) A method according to claim 1, furthermore comprising 
storing a copy of the new file on the central infrastructure. 

5. (Cancelled). 

6. (Currently Amended) A non-transitory computer readable storage medium comprising 
program instructions for oxocuting the method of claim 1 when oxocutod on a network. 
executable by a processor to: 

receive a new file on said local computing device; 

in response to receiving the new file, cause the local computing device to: 

calculate a reference value for the new file using a one-way-function; and 

transmit said calculated reference value to said central infrastructure; 
in response to receiving the reference value, cause the central infrastructure to 

compare said calculated reference value with reference values previously 
stored within the remaining part of the network environment; 
responsive to said comparing: 

if a match between the calculated reference value and a previously stored 
reference value is found: 

decide that the content of the new file is already identified; and 
retrieve corresponding content attributes; 
if a match between the calculated reference value and any of the 
previously stored reference values is not found: 
decide that the content of the new file is not yet identified; 
enable the new file on the local computing device to be remotely 



dng for copyrighted information, using a scanning 



installed on said central 



accessed by the central infrastructure; and 
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cause the central infrastructure to identify the content of the new 
file by remotely identifying the content over the network 
environment without the new file being conveyed to the 
central infrastructure, thereby determining content 
attributes corresponding with the content of the new file 
and storing a copy of said content attributes at the central 
infrastructure; 

after deciding, trigger an action on said local computing device in 

accordance with said content attributes; 
wherein said triggering an action on said local computing device in 

accordance with said content attributes comprises: 

identifying a different version of the new file on the remaining part 
of the network environment, the new file representing a 
corrupted version of a given file and the different version 
representing an uncorrupted version of the given file; and 

replacing the new file on the local computing device with the 
identified different version of the new file. 

7. (Currently Amended) A system for identifying the content of a file in a network 
environment, said network environment comprising at least one local computing device 
linked to a remaining part the network environment which includes a central 
infrastructure and, said remaining part including a stored database wherein: 
the local computing device is configured to: 
receive a new file; 

in response to receiving the new file: 

calculate a reference value for the new file using a one-way- function; 
and 

transmit said calculated reference value to said central infrastructure; 
wherein in response to receiving the reference value the central infrastructure is 
configured to: 
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compare said calculated reference value with previously stored 

reference values from the database; 
responsive to said compare: 
if a match between the calculated reference value and a previously stored 
reference value is found: 
decide whether that the content of the new file is already identified; 
and 

retrieve corresponding attribute values; 

based on comparison of said calculated reference value and reference 
values previously stored within the remaining part; 
if a match between the calculated reference value and any of the 
previously stored reference values is not found: 
decide that the content of the new file is not yet identified; 
enable the new file on the local computing device to be remotely 

accessed by the central infrastructure; and 
the central infrastructure identifying the content of the new file by 
remotely identifying the content over the network 
environment without the new file being conveyed to the 
central infrastructure, thereby determining content 
attributes corresponding with the content of the new file 
and storing a copy of said content attributes at the central 
infrastructure; 

after deciding, triggering an action on said local computing device in 

accordance with said content attributes; 
wherein said triggering an action on said local computing device in 
accordance with said content attributes comprises: 
identifying a different version of the new file on the remaining part 
of the network environment, the new file representing a 
corrupted version of a given file and the different version 
representing an uncorrupted version of the given file; and 
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replacing the new file on the local computing device with the 
identified different version of the new file. 

remotely identify tho content of the now file - over the network and assign content 
attributes if the new file has not been identified yet and store said 
content attributes within the remaining part; and 

trigger an action on said local computing device in accordance with content 
attributes for said new file; 

wherein triggering said action on said local computing device in accordance with 
said content attributes comprises replacement of the new file on the 
local computing device with a different version of said new file 
restored from tho remaining part of tho network environment . 

8. (Previously Presented) A system according to claim 7 wherein the central 
infrastructure is further configured to store a copy of the new file within the remaining 
part. 

9-17. (Cancelled). 

18. (Cancelled). 

19. (Canceled). 

20. (New) The method according to claim 1, wherein said identifying the content of said 
new file comprises one or more of the group of scanning for adult content, scanning for 
Self Promotional Advertising Messages and scanning for copyrighted information. 
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21. (New) The computer readable storage medium according to claim 6, wherein said 
identifying the content of said new file comprises one or more of the group of scanning 
for adult content, scanning for Self Promotional Advertising Messages and scanning for 
copyrighted information. 

22. (New) The system according to claim 7, wherein said identifying the content of said 
new file comprises one or more of the group of scanning for adult content, scanning for 
Self Promotional Advertising Messages and scanning for copyrighted information. 
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